Privacy Policy

What this policy covers

This policy explains what roehn does with personal information connected to this website and to orders arranged through it. It describes the site as it is actually built, not a generic e-commerce stack.

Revised August 2026: the site now uses the Meta Pixel and the Meta Conversions API to measure advertising. The sections on cookies and on advertising below describe exactly what that sends. Nothing else about how information is handled has changed.

What we collect

We collect your name, email address, phone number (if you give one), delivery address, and a record of what you ordered and when. We also keep the email correspondence in which an order is arranged, and the order reference used to match your payment.

Almost all of this reaches us because you send it to us. As the site is currently built, the forms on it — contact, wholesale enquiry, newsletter, and checkout — run entirely in your browser and do not transmit anything to us or to any third party. What you type into them stays on your device until you email us.

Signing in to your account

Account sign-in uses a six-digit code emailed to your address rather than a password, so there is no password for us to store or for anyone to steal. The code is kept only as a one-way hash, expires in ten minutes, can be used once, and is never written into our email records in readable form. A successful sign-in creates a session identified by a random token; we store only a hash of that token, with your email address and the expiry. The session lasts thirty days unless you sign out, which deletes it immediately. Signing in shows the orders placed with that email address, looked up by the address the code proved you can read — so no one can see an order history by claiming to be someone else.

We collect no card or bank data

This storefront has no payment fields. We never see, ask for, or store a card number, CVV, expiry, bank account number, or routing number. Most payment is a transfer you initiate yourself inside your own payment app, so those details stay with that app and with your bank. Where card payment is offered, it is completed on our secure payment page and the card is handled there by the payment processor — the card number never reaches us.

Cookies and browser storage

The site itself sets one cookie: roehn-age-verified. It records only that you confirmed you are 21 or older, contains no identifier and nothing about you, and expires after one year. Without it the age screen simply appears again on your next visit. The Meta Pixel described in the next section sets two more, _fbp and _fbc.

The site also stores a few things in your own browser, which never leave your device and which we cannot read: your cart contents, your part-completed checkout details (kept only for the current browser session so a refresh does not lose them), and — if you sign in — the token for your account session. Clearing your browser's site data for this domain removes all of it.

Advertising measurement: Google Ads

We also advertise on Google Search. Google adds a click identifier to the web address when you arrive from one of our ads. That identifier is stored in your own browser and, if you place an order, recorded against that order. It identifies the advertisement you clicked, not you.

When an order is paid for, we report that click identifier back to Google together with the time of the payment, the amount, and our order reference, so that Google can tell which advertisements led to a sale. We do not send Google your name, your email address, your telephone number or your delivery address, and there is no Google tag, script or cookie running on this site.

Advertising measurement: the Meta Pixel

We advertise on Facebook and Instagram, and this site uses the Meta Pixel to measure whether that advertising works. It is the only third-party tracking technology that runs in your browser on this site. It reports to Meta the pages you view, a product you look at, an item added to the bag, a checkout started, an order placed, and a handbook requested — with the product, the value, and our order reference. It never carries a card number or an address.

So that the measurement holds when a browser blocks the pixel, our server also reports an order placed and a handbook requested to Meta directly, through the Meta Conversions API. That report carries your IP address and browser identification, the same _fbp and _fbc identifiers the pixel set, and your email address — plus, for an order, your name, phone number, city, state, postal code and country. Each of those personal fields is converted to a one-way hash before it leaves our server, so Meta can match the event to an account it already holds but cannot read the value from what we send. Every event carries a reference that lets Meta count it once even when both the pixel and the server report it.

The pixel sets two cookies: _fbp, which identifies the browser to Meta, and _fbc, which records the Meta ad you clicked to arrive here, if any. Meta uses what it receives under its own privacy policy, at https://www.facebook.com/privacy/policy, and may combine it with your Meta account. You can limit how Meta uses this data for advertising in your Facebook settings, under Accounts Center and then Ad preferences. A content blocker, or the tracking protection in your browser, stops the pixel running at all, and the site works identically without it.

There is nothing else: no analytics suite, no session recording, no heatmaps, and no other advertising tracker. We do not sell personal information, and beyond the Meta reporting described here we do not share it for advertising.

How we use what you give us

We use your information to answer your enquiry, to price and confirm an order, to match your payment transfer to that order, to address and dispatch your shipment, to handle a shipping or certificate problem, and to keep the records that tax and compliance rules require of us. We do not use it for automated decision-making.

Who else sees it

Your name, delivery address, and phone number are given to the shipping carrier so it can deliver your parcel. Separately, when you send payment, the payment app you chose — PayPal, Zelle, Venmo, Apple Cash, Revolut, or a cryptocurrency checkout — handles that transfer under its own privacy policy and its own terms, which we do not control; we see only what that app shows a recipient, such as the sender name and the memo. Meta receives the advertising-measurement events described above, in the form described there. We otherwise do not disclose your information, except where we are legally required to.

How long we keep it

Records tied to a completed order — what was sold, to whom, to what address, and how it was paid — are kept for as long as tax, accounting, and product-compliance rules require us to keep them. Enquiries that do not become orders, and marketing correspondence, are deleted when you ask us to.

Access, correction, and deletion

You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it, by emailing support@roehn.co from the address on the order or enquiry. We will respond within the time your local law allows, and we will tell you if a record has to be kept for a legal reason. There is no self-service data-download or account-deletion screen on this site; email us and we will handle it.

21 and over

This site is age-gated and is not directed at anyone under 21. We do not knowingly collect personal information from minors. If you believe a minor has given us information, email support@roehn.co and we will delete it.

Security

The site is served over HTTPS. The strongest protection here is structural rather than technical: we hold no payment credentials and no passwords for this storefront, so there is no card or credential store to breach. Information you send us by email travels as ordinary email, which is not end-to-end encrypted — please do not send us financial details, identity documents, or anything else sensitive that we have not asked for.

Changes to this policy

We may update this policy by posting a revised version on this page with a new revision date. If a change materially affects what we collect or who we share it with, we will say so at the top of the page.

Status of this document

This notice describes how roehn and this website actually handle information. It is the current privacy policy for the site, and it applies to every order and enquiry made through it.